Intelligence · Disclosure tracker
Every public disclosure, dated and sourced.
Public breach disclosures from regulators, court filings, company notices and news reporting, each recorded with its date and a link to the original. Updated daily.
5,406
Disclosures in the tracker, all years
2,120
Of those, indexed in 2026
45
Added in November
46
Added in the last 7 days
7
Sectors covered
Source: LeakTrace disclosure tracker, 6 Nov 2026. Counts of records in the index, not estimates. Software advisories and security news are not counted.
Worldwide · How they got in
Incidents worldwide, by country.
77 incidents from 9 countries in the last 90 days, each from a public source and reviewed before it is shown. Where the source says how the attackers got in, the row says so.
- Canada5 Nov 2026Burnaby School DistrictThe source does not say how they got in.CBC News
- Canada3 Nov 2026Central Okanagan School DistrictThe source does not say how they got in.CBC News
- Canada31 Oct 2026ChainalysisHow they got in: automated AI tools that work through many organizations at once.BleepingComputer
- Canada29 Oct 2026McCarthy Tétrault (with Davies also reporting a breach)The source does not say how they got in.The Globe and Mail
Medium21 May 2026
Grafana Labs has
Sector not stated · Records not stated
Grafana Labs has confirmed a recent data breach was caused by the TanStack supply chain attack
21 May 2026
High21 May 2026
Windows93 / Myspace93
Retail · 46,105 records
46,105 records exposed, Email addresses, IP addresses, Passwords, Usernames
21 May 2026
High21 May 2026
Dragonica Lunaris
Technology · 126,293 records
126,293 records exposed, Dates of birth, Email addresses, Names, Passwords and 2 more
21 May 2026
Medium19 May 2026
CTT
Technology · 468,124 records
468,124 records exposed, Email addresses, Names, Phone numbers
19 May 2026
Critical18 May 2026
Addi
Finance · 34,532,941 records
34,532,941 records exposed, Age groups, Credit scores, Device information, Email addresses and 9 more
18 May 2026
High14 May 2026
Abrigo
Finance · 711,099 records
711,099 records exposed, Email addresses, Employers, Job titles, Names and 2 more
14 May 2026
Critical13 May 2026
Instructure
Sector not stated · Records not stated
Instructure says it reached an agreement with ShinyHunters over the Canvas breach data
13 May 2026
Medium13 May 2026
Canada Life
Retail · 237,810 records
237,810 records exposed, Email addresses, Job titles, Names, Phone numbers and 3 more
13 May 2026
Medium12 May 2026
Cushman & Wakefield
Government · 310,431 records
310,431 records exposed, Email addresses, Job titles, Names, Phone numbers and 2 more
12 May 2026
Medium11 May 2026
Organisation not named
Sector not stated · Records not stated
The disclosure as indexed does not name the organisation.
ShinyHunters gets away with emails and other data on 200,000 Zara customers
11 May 2026
Medium11 May 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school login pages and threatening to leak stolen data unless institutions negotiate
11 May 2026
Medium8 May 2026
Zara
Finance · 197,376 records
197,376 records exposed, Email addresses, Geographic locations, Purchases, Support tickets
8 May 2026
Medium7 May 2026
Woflow
Technology · 447,593 records
447,593 records exposed, Email addresses, Names, Phone numbers, Physical addresses
7 May 2026
Critical6 May 2026
Rapid7
Sector not stated · Records not stated
Rapid7 reveals an Iranian false flag operation masquerading as a Chaos ransomware attack
6 May 2026
High6 May 2026
LegionProxy
Technology · 10,144 records
10,144 records exposed, Email addresses, Names, Passwords, Purchases
6 May 2026
Medium5 May 2026
Vimeo
Finance · 119,167 records
119,167 records exposed, Email addresses, Names
5 May 2026
High3 May 2026
Marcus & Millichap
Government · 1,837,078 records
1,837,078 records exposed, Email addresses, Employers, Job titles, Names and 2 more
3 May 2026
High2 May 2026
ZenBusiness
Finance · 5,118,184 records
5,118,184 records exposed, Email addresses, Names, Phone numbers
2 May 2026
High1 May 2026
Canvas (Instructure)
Education · Records not stated
Ransomware attack by online extortion group shut down education platform used by universities and K-12 schools during finals week.
1 May 2026
Medium1 May 2026
West Pharmaceutical Services
Healthcare · Records not stated
Disruptive ransomware attack forced systems offline globally, disrupting operations.
1 May 2026
Medium1 May 2026
Organisation not named
Education · Records not stated
The disclosure as indexed does not name the organisation.
Ransomware attack on Canvas disrupted finals week across universities nationwide.
1 May 2026
High1 May 2026
Canvas (Instructure)
Education · Records not stated
Ransomware attack shut down the education platform used by universities and K-12 schools across the US during finals week, affecting thousands of schools.
1 May 2026
Medium1 May 2026
West Pharmaceutical Services
Sector not stated · Records not stated
Ransomware attack forced the company to take systems offline globally, disrupting operations. No data exposure count reported.
1 May 2026
High1 May 2026
Canvas (Instructure)
Education · Records not stated
Ransomware attack by ShinyHunters group forced Canvas shutdown during finals week, affecting universities including Murray State.
1 May 2026
Were you affected?